summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2003-12-29 12:10:18 +0000
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2003-12-29 12:10:18 +0000
commit1a99e62a65d376a97346430a9f54e9a7a8005a1e (patch)
tree25bf68695c8ca18cbcc253139eec889cd3a13a69
parent34561b4f0546a8de113fabd802c2d2a292999640 (diff)
downloadgnutls-1a99e62a65d376a97346430a9f54e9a7a8005a1e.tar.gz
*** empty log message ***
-rw-r--r--NEWS5
-rw-r--r--configure.in2
-rw-r--r--doc/tex/library.tex2
-rw-r--r--lib/pkix.asn4
-rw-r--r--lib/pkix_asn1_tab.c4
-rw-r--r--lib/x509/extensions.c2
6 files changed, 13 insertions, 6 deletions
diff --git a/NEWS b/NEWS
index 5ec2089c63..3a926bd3d7 100644
--- a/NEWS
+++ b/NEWS
@@ -1,7 +1,10 @@
+Version 1.1.3
+- Implemented TLS 1.1 (which obsoleted the TLS 1.0 CBC protection
+ hack).
+
Version 1.1.2 (28/12/2003)
- Added CRL verification functionality to certtool.
- Corrected the CRL distribution point extension handling.
-- Implemented TLS 1.1
Version 1.1.1 (26/12/2003)
- Added PKCS #7 support to certtool utility.
diff --git a/configure.in b/configure.in
index 32dbd3fcec..5309c2ad5d 100644
--- a/configure.in
+++ b/configure.in
@@ -12,7 +12,7 @@ AC_DEFINE_UNQUOTED(T_OS, "$target_os", [OS name])
dnl Gnutls Version
GNUTLS_MAJOR_VERSION=1
GNUTLS_MINOR_VERSION=1
-GNUTLS_MICRO_VERSION=2
+GNUTLS_MICRO_VERSION=3
GNUTLS_VERSION=$GNUTLS_MAJOR_VERSION.$GNUTLS_MINOR_VERSION.$GNUTLS_MICRO_VERSION
AC_DEFINE_UNQUOTED(GNUTLS_VERSION, "$GNUTLS_VERSION", [version of gnutls])
diff --git a/doc/tex/library.tex b/doc/tex/library.tex
index 08af7c6190..2b8efec57c 100644
--- a/doc/tex/library.tex
+++ b/doc/tex/library.tex
@@ -18,7 +18,7 @@ in the distribution}.
Important features of the \gnutls{} library include:
\begin{itemize}
-\item Support for both \tlsI{} and \sslIII{} protocols.
+\item Support for \tlsI{}, \tlsII{} and \sslIII{} protocols.
\item Support for both {\bf X.509} and {\bf OpenPGP} certificates.
\item Support for handling and verification of certificates.
\item Support for {\bf SRP} for \tls{} authentication.
diff --git a/lib/pkix.asn b/lib/pkix.asn
index 2e81cee619..c43743b90b 100644
--- a/lib/pkix.asn
+++ b/lib/pkix.asn
@@ -200,8 +200,8 @@ DistributionPoint ::= SEQUENCE {
-- This does not work since it does not tag elements.
DistributionPointName ::= SEQUENCE {
- fullName [0] GeneralNames
--- nameRelativeToCRLIssuer [1] RelativeDistinguishedName
+ fullName [0] GeneralNames OPTIONAL,
+ nameRelativeToCRLIssuer [1] RelativeDistinguishedName OPTIONAL
}
ReasonFlags ::= BIT STRING {
diff --git a/lib/pkix_asn1_tab.c b/lib/pkix_asn1_tab.c
index 12bb3dff7b..d47aa460ae 100644
--- a/lib/pkix_asn1_tab.c
+++ b/lib/pkix_asn1_tab.c
@@ -182,8 +182,10 @@ const ASN1_ARRAY_TYPE pkix_asn1_tab[]={
{"cRLIssuer",536895490,"GeneralNames"},
{0,4104,"2"},
{"DistributionPointName",1610612741,0},
- {"fullName",536879106,"GeneralNames"},
+ {"fullName",1610637314,"GeneralNames"},
{0,4104,"0"},
+ {"nameRelativeToCRLIssuer",536895490,"RelativeDistinguishedName"},
+ {0,4104,"1"},
{"ReasonFlags",1610874886,0},
{"unused",1073741825,"0"},
{"keyCompromise",1073741825,"1"},
diff --git a/lib/x509/extensions.c b/lib/x509/extensions.c
index 498f4a5d2b..fc6e07a2df 100644
--- a/lib/x509/extensions.c
+++ b/lib/x509/extensions.c
@@ -687,6 +687,8 @@ int _gnutls_x509_ext_gen_crl_dist_points(gnutls_x509_subject_alt_name type,
}
#endif
+ asn1_write_value( ext, "?LAST.distributionPoint.nameRelativeToCRLIssuer", NULL, 0);
+
result = write_new_general_name(ext, "?LAST.distributionPoint.fullName", type, data_string);
if (result < 0) {
gnutls_assert();